← Back

Perl Archive Zip

perl-archive-zip

Vendor: Perl Archive Zip Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Canonical
DebianPerl Archive Zip Project
3Debian Linux
Perl Archive ZipUbuntu Linux
Nov 21, 2024
Jun 29, 2018
N/A· v4
7.5 HIGH· v3
6.4 MEDIUM· v2
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially craft...Show more
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.Show less